AWS Cloud Security Engineer

Position Overview

• Location Type: 100% Remote
• Employment Type: Full-time
• Salary: $110,000 - $145,000

Swish Analytics is a sports analytics, betting and fantasy startup building the next generation of predictive sports analytics data products. We believe that oddsmaking is a challenge rooted in engineering, mathematics, and sports betting expertise; not intuition. We're looking for team-oriented individuals with an authentic passion for accurate and predictive real-time data who can execute in a fast-paced, creative, and continually-evolving environment without sacrificing technical excellence. Our challenges are unique, so we hope you are comfortable in uncharted territory and passionate about building systems to support products across a variety of industries and consumer/enterprise clients.

Requirements

• Experience: 5-8 years of hands-on experience in AWS Security
• IAM Knowledge: Strong knowledge of IAM (roles, policies, least privilege)
• AWS Security Services: Experience with AWS security services (e.g., GuardDuty, Security Hub, Inspector, Macie, KMS, CloudTrail, WAF, Shield)
• VPC Security: Familiarity with VPC security, subnet segmentation, NACLs, and security groups
• Security Tools: Familiarity with security and logging tools such as BurpSuite, OWASP ZAP, CrowdStrike, Datadog, etc.
• AWS Well-Architected Framework: Deep understanding of AWS Well-Architected Framework, especially the Security Pillar
• CSPM Tools: Experience implementing and maintaining cloud security posture management (CSPM) tools and frameworks
• IaC: Proficient in Infrastructure-as-Code (IaC) using tools such as Terraform, CloudFormation, or AWS CDK
• SecDevOps Experience: Integrating security tools into CI/CD pipelines (e.g., Snyk, Checkov, Trivy, SonarQube)
• Automation: Automating compliance and security checks
• Github Experience: Experience with Github
• Container Security: Container security best practices (ECR, ECS, EKS, etc.)
• Kubernetes Security: Experience securing Kubernetes clusters (EKS or self-managed)
• Kubernetes Knowledge: Knowledge of network policies, RBAC, Pod Security Standards, and runtime security
• Scripting Languages: Proficiency with scripting languages like Python, Bash, or PowerShell for automation and security tooling
• Security Incident Response: Experience with security incident response in AWS environments, including detection, analysis, and mitigation

Certifications (Preferred but not required)

• AWS Certified Security – Specialty
• AWS Certified Solutions Architect – Associate or Professional
• Certified DevSecOps Professional (e.g., DevSecOps Foundation)
• GIAC Cloud Security Automation (GCSA) or similar
• Certified Kubernetes Security Specialist (CKS)

Responsibilities

• Implementing and maintaining cloud security posture.
• Integrating security tools into CI/CD pipelines.
• Automating compliance and security checks.
• Securing Kubernetes clusters.
• Managing infrastructure and security policies through Git repositories.
• Providing security incident response support in AWS environments.
• Collaborating with developers, cloud engineers, and security teams.

Application Instructions

• (Details are missing - Please refer to the original job posting for specific instructions.)

Company Information

Swish Analytics is an Equal Opportunity Employer. All candidates who meet the qualifications will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status.